CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Apache RocketMQ Schwachstelle für beliebiges Dateischreiben Exploit Demo Übersicht Tatsächlich wurde die Schwachstelle für beliebiges Dateischreiben CVE-2023-37582 in Apache RocketMQ bereits in der CVE-2023-33246 RCE-Schwachstelle behandelt. Allerdings ist der für...

MAL-001

MAL-001: FreeMarker Server-Side Template Injection in Liferay Portal In Liferay - Portal =7.4.3.12-ga12 wurde ein Problem entdeckt. Durch das Einfügen schädlicher Inhalte in die FTL-Templates kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die offengelegte...

CVE-2026-40453

Riproduttore di Iniezione di Intestazioni Camel con Variazione di Maiuscole/Minusscole CVE-2026-40453 Questo progetto dimostra CVE-2026-40453 — una correzione incompleta per CVE-2025-27636. La correzione del 2025 ha aggiunto setLowerCasetrue a HttpHeaderFilterStrategy in modo che i nomi di...

CVE-2023-43208-MIRTHCONNECT

CVE-2023-43208 NextGen Healthcare Mirth Connect è vulnerabile all'esecuzione remota di codice non autenticata nelle versioni precedenti alla 4.4.1. Si noti che questa vulnerabilità è causata dalla patch incompleta di CVE-2023-37679. PRIMO: NON SONO RESPONSABILE DI CIÒ CHE NE FARAI. SECONDO: apt-g...

CVE-2019-1064

CVE-2019-1064 CVE-2019-1064 - AppXSVC Elevação Local de Privilégio Parece que isso pode não estar tão corrigido quanto o esperado. PoC temporariamente indisponível...

CVE-2023-49964

CVE-2023-49964: FreeMarker Server-Side Template Injection in Alfresco In Hyland Alfresco Community Edition =7.2.0 wurde ein Problem entdeckt. Durch das Einfügen von schädlichem Inhalt in die Datei folder.get.html.ftl kann ein Angreifer SSTI-Angriffe Server-Side Template Injection durchführen, die...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Eine kleine Erklärung eines Apache-Pfad-Traversal-Bugs und einer unvollständigen Behebung Task 1: Ein bisschen Hintergrund... Eine kurze Geschichte Am 5. Oktober 2021 wurde eine CVE veröffentlicht, d...

CVE-2025-1302

CVE-2025-1302 ★ CVE-2025-1302 PoC de RCE do JSONPath-plus ★ https://github.com/user-attachments/assets/5d791540-ef6c-4cd0-bd25-7a1dbbd194fb Configuração do Laboratório root@kitploit: docker build -t jsonpath:10.2.0 . docker run --rm --name jsonpath -p 3000:3000 jsonpath:10.2.0 localhost:3000...

CVE-2023-43208

Vulnerabilidade de RCE no Mirth Connect CVE-2023-37679 e CVE-2023-43208 Este script de exploit e PoC foram escritos para uma análise aprofundada da CVE no vsociety. A CVE-2023-43208 é uma falha de segurança grave no NextGen Mirth Connect, uma ferramenta usada por hospitais e clínicas para...

CVE-2021-45046

tejas-nagchandi/CVE-2021-45046 Attacco Descrizione È stato riscontrato che la correzione per CVE-2021-44228 in Apache Log4j 2.15.0 era incompleta in alcune configurazioni non predefinite. Ciò potrebbe consentire ad attaccanti con controllo sui dati di input del Thread Context Map MDC di creare da...

CVE-2023-34152

CVE-2023-34152 ImageMagick 6.9.6-4 को प्रभावित करने वाली RCE कमजोरी। यह कमजोरी हमलावर को पीड़ित सिस्टम पर कमांड निष्पादित करने की अनुमति देती है। इस प्रकार, रिमोट कमांड निष्पादन संभव होता है। यह एक POC है जो fullwaywang द्वारा CVE-2023-34152 की खोज से प्रेरित है। कमजोरी का खुलासा root@kitploit:...

CVE-2026-57171 Trestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)

Trestle (compliance-trestle), a Python SDK and CLI for managing OSCAL compliance documents, is affected by an arbitrary file write via path traversal in the catalog-generate, profile-generate, and ssp-generate author commands. The output argument is joined onto the Trestle root but guarded only b...

CVE-2026-65637

Apache Tomcat is affected by an Improper Input Validation vulnerability that allows an HTTP/2 no-authority bypass of strict SNI validation . The root cause is an incomplete fix for the prior vulnerability CVE-2026-32990 . Affected versions span three branches: 11.0.20–11.0.24 , 10.1.53–10.1.57 , ...

Log4j_CVE-2021-45046

Log4j 2.15.0 Escalation dei privilegi -- CVE-2021-45046 Attacco Descrizione È stato riscontrato che la correzione per affrontare CVE-2021-44228 in Apache Log4j 2.15.0 era incompleta in determinate configurazioni non predefinite. Ciò potrebbe consentire agli aggressori con controllo sui dati di...

EUVD-2026-65532

Winter CMS versions before 1.2.13 contain an incomplete fix for a Twig sandbox escape vulnerability in System\Twig\SecurityPolicy that allows authenticated backend users with template-editing permissions to bypass sandbox restrictions. Attackers can exploit method forwarding through Eloquent...

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

Summary webcrawl an exported, model-callable tool validates only the INITIAL URL's resolved IP against a private/loopback blocklist, then fetches with httpx.Clientfollowredirects=True and never re-validates redirect targets. An attacker who controls the agent's crawl target a malicious task, or...

httpd-2.4.49

httpd-2.4.49 critico: Path Traversal ed esecuzione remota di codice in Apache HTTP Server 2.4.49 e 2.4.50 fix incompleto di CVE-2021-41773 CVE-2021-42013...

CVE-2019-16278

Exploit per CVE-2019-16278 e CVE-2019-16279 Nostromo httpd è soggetto a 2 vulnerabilità critiche per versioni &1 Questo bug è dovuto a una correzione incompleta per CVE-2011-0751. Possiamo aggirare un controllo per che ci permette di eseguire con argomenti arbitrari...

CVE-2026-78701 389-ds-base: 389-ds-base: cve-2026-11610 incomplete fix may introduce a connection-stall dos

A flaw was found in 389-ds-base. A remote, authenticated attacker could exploit a vulnerability in the Simple Authentication and Security Layer SASL UNBIND process. By sending a specially crafted request, the attacker can cause a connection to stall, leading to resource exhaustion and a Denial of...

CVE-2026-68959

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the affected product is installed may be able to execute arbitrary code on another Windows system that has the affected...